SSL configuration

Alexander Hristov <[email protected]>
Newsgroups gmane.comp.python.cherrypy
Message-ID <[email protected]>
Hello everyone,

I have a small cherrypy app that I'll need to be running with ssl. I have a 
domain and a generated certificate with Comodo and I've been trying to run 
a test app. Cherrypy fires up correctly but I I can't seem to get through. 
The application looks like this:

import cherrypy


class RootServer:
    @cherrypy.expose
    def index(self, **keywords):
        return "SSL HERE WE COME!!!!"




if __name__ == '__main__':
    server_config={
        'server.socket_host': 'mydomain.com',
        'server.socket_port':443,


        'server.ssl_module':'pyopenssl',
        'server.ssl_certificate':'/var/www/certs/mydomain_com.crt',
        'server.ssl_private_key':'/var/www/certs/mydomain.com.key',
        'server.ssl_certificate_chain':'/var/www/certs/bundle.pem'
    }


    cherrypy.config.update(server_config)
    cherrypy.quickstart(RootServer())


With the appropriate domain and certificate routes.

However it doesn't seem to be working at all:

alex@asus:~> openssl s_client -connect edufuzz.com:443 -state -nbio 2>&1 | 
grep "^SSL"
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:error in SSLv2/v3 read server hello A
SSL3 alert read:fatal:handshake failure
SSL_connect:error in SSLv2/v3 read server hello A
SSL handshake has read 7 bytes and written 261 bytes


Does anyone know what this might be and what am I doing wrong?

Thanks

-- 
You received this message because you are subscribed to the Google Groups "cherrypy-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cherrypy-users+unsubscribe-/JYPxA39Uh5TLH3MbocFF+G/[email protected]
To post to this group, send email to cherrypy-users-/JYPxA39Uh5TLH3MbocFF+G/[email protected]
Visit this group at https://groups.google.com/group/cherrypy-users.
For more options, visit https://groups.google.com/d/optout.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.